You're confusing application isolation with process isolation. Yes, ASP.NET runs all applications within the same process by default; however, it does isolate the applications within that process as I describe. It's a very simple matter of configuration to add process isolation in ASP.NET by assigning applications to different process pools; and yes, the memory consumption of additional ASP.NET processes is much less than addition CFMX instances.
The default setting on IIS 6.0 is to run ASP.NET processes as a user with lower security privileges than LocalSystem, so that's another advantage of ASP.NET (and BlueDragon.NET) over CFMX or the Java/J2EE editions of BlueDragon. Again, I'm presenting a talk a CFUNITED that covers all of these topics (the talk is specifically focused on Windows Server 2003 and IIS 6.0, so some of the points you bring up about IIS 5.0 won't be covered). Vince Bonfanti http://blog.newatlanta.com New Atlanta Communications, LLC http://www.newatlanta.com > -----Original Message----- > From: Dave Watts [mailto:[EMAIL PROTECTED] > Sent: Sunday, April 24, 2005 11:36 AM > To: CF-Talk > Subject: RE: CrystalTech Users Beware > > > It's not exactly true that "all sorts of code other than CF" > > have these sorts of problems in shared hosting environments. > > ASP.NET, for example, isolates every application from all > the others > > just to avoid these problems. > > If you're running BlueDragon.NET, then your CFML inherits this > > application isolation so that multiple users can use the same > > CFAPPLICATION name without conflict. Also, with BlueDragon.NET, you > > don't have to turn off CFOBJECT to avoid security issues; > again, this > > is because the underlying ASP.NET runtime insures that all > > applications are isolated from each other. > > Well, first of all, when I said "all sorts" I simply meant > it's a common problem, not that there aren't environments > that are immune. You can run Perl or whatever within a chroot > environment on Unix, and that would also be immune. However, > these environments are the exception and not the rule, I suspect. > > That said, it's my understanding that ASP.NET does not > automatically isolate applications the way you suggest. You > can configure them to be isolated within the IIS management > console by choosing the application isolation level in IIS 5 > or the application pool in IIS 6, but I'm not sure what the > default settings happen to be - on IIS 6, I think the > "DefaultAppPool" is used by default, while on IIS 5 I think > that "Medium" is the default application isolation level, > which I believe will place more than one application within > the same pool. > > In addition, on IIS 5 your ASP.NET applications run as > LocalSystem by default, I think, so those applications have > free run of the filesystem by default. On IIS 6 you can run > them using a lower-privilege security context like > NetworkSystem, but that's not the default setting. > > Now, I'm certainly no expert when it comes to ASP.NET > security, so if I've made any errors, please let me know. But > in any case, running separate ASP.NET application pools is > about the same thing as running separate instances of CFMX > within separate JRun servers, as far as I can tell, although > presumably the memory consumption of a single ASP.NET > application is probably much smaller than the memory > consumption of a single CFMX instance. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > > Fig Leaf Software provides the highest caliber > vendor-authorized instruction at our training centers in > Washington DC, Atlanta, Chicago, Baltimore, Northern > Virginia, or on-site at your location. > Visit http://training.figleaf.com/ for more information! > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Discover CFTicket - The leading ColdFusion Help Desk and Trouble Ticket application http://www.houseoffusion.com/banners/view.cfm?bannerid=48 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204189 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
